Microsoft SC-200 Exam - Topic 1 Question 90 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 90
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.

You initiate a live response session on each device.

You need to collect a Defender for Endpoint investigation package from each device.

On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?

ADevice1 and Device2 only

BDevice1, Device2, and Device3 only

CDevice3 and Device4 only

DDevice1, Devke2, Device3, and Device4

Show Suggested Answer

Suggested Answer: B

by Emmanuel at Jan 28, 2025, 10:00 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lynette

5 months ago

I'm with you, Kenneth! Device1 and Device2 make the most sense.

upvoted 0 times

...

Lorrine

5 months ago

Wait, can you really collect from all those devices? Sounds off.

upvoted 0 times

...

Ernest

5 months ago

Definitely Device3 and Device4, right?

upvoted 0 times

...

Monte

5 months ago

Nah, I believe it's Device1, Device2, and Device3.

upvoted 0 times

...

Kenneth

6 months ago

I think it's Device1 and Device2 only.

upvoted 0 times

...

Odelia

6 months ago

I recall something about limitations on Device4, so I’m guessing it’s not included. Maybe it’s just Device1 and Device2 after all?

upvoted 0 times

...

Gregoria

6 months ago

I thought we could collect from all devices, but I’m leaning towards just Device1 and Device2 based on what I studied.

upvoted 0 times

...

Gladys

6 months ago

I’m not entirely sure, but I feel like Device3 might also be included. It seems familiar from the practice questions we did.

upvoted 0 times

...

Audra

6 months ago

I remember that only certain devices support advanced live response commands. I think Device1 and Device2 are the ones we can use.

upvoted 0 times

...

Brittni

6 months ago

Good catch on the live response session requirement. I agree that B seems like the correct answer here.

upvoted 0 times

...

Mitsue

6 months ago

Based on the information provided, I think the answer is B. Device1, Device2, and Device3 should be able to run the advanced live response commands to collect the investigation package.

upvoted 0 times

...

Mary

6 months ago

I'm a bit confused about the live response session part. Does that mean we can only collect the package through the CLI on certain devices?

upvoted 0 times

...

Jaime

6 months ago

Okay, let me think this through step-by-step. We have a Microsoft 365 subscription with Defender for Endpoint, and we need to collect an investigation package from each device.

upvoted 0 times

...

Aleisha

7 months ago

This question seems straightforward, but I want to make sure I understand the requirements correctly before answering.

upvoted 0 times

...

Cherri

1 year ago

I believe the correct answer is Device1, Device2, and Device3 only.

upvoted 0 times

...

Adelle

1 year ago

I'm not sure, but I think we might also be able to collect the package from Device3.

upvoted 0 times

...

My

1 year ago

I agree with Francoise, the advanced live response commands can be run on Device1 and Device2.

upvoted 0 times

...

Francoise

1 year ago

I think we can collect the package from Device1 and Device2 only.

upvoted 0 times

...

Veronique

1 year ago

I bet the answer is D, but I'm really just hoping Device4 is a toaster. *laughs* You know, for a truly advanced investigation package.

upvoted 0 times

Jacqueline

1 year ago

User4: D sounds good to me too. Let's collect the package from all devices.

upvoted 0 times

...

Tamekia

1 year ago

User3: I also believe it's D. Let's go with that.

upvoted 0 times

...

Dorothy

1 year ago

User2: Yeah, I agree. Device4 is not a toaster, unfortunately.

upvoted 0 times

...

Laquita

1 year ago

User1: I think the answer is D.

upvoted 0 times

...

Helga

1 year ago

Device1 and Device2 sound like your typical PCs, but Device3 and Device4 could be anything. Better check the fine print on those advanced live response commands. *chuckles*

upvoted 0 times

Jovita

1 year ago

I agree, Device3 and Device4 might not support the advanced live response commands.

upvoted 0 times

...

Arminda

1 year ago

I think it's A) Device1 and Device2 only.

upvoted 0 times

...

Christa

1 year ago

Hmm, I'm not so sure. What if Device4 is a Mac? Then the answer would be D, right? I'm just throwing it out there.

upvoted 0 times

...

Delfina

1 year ago

I think the answer is B. Device1, Device2, and Device3 only. Advanced live response commands can only be run on devices with supported operating systems.

upvoted 0 times

Emelda

1 year ago

Yes, that makes sense. Those devices are the ones that support running advanced live response commands.

upvoted 0 times

...

Lazaro

1 year ago

I agree with you, I think the answer is B. Device1, Device2, and Device3 only.

upvoted 0 times

...